Data Diode ICSSCADA Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A water utility is deploying a data diode to send SCADA data to a cloud historian. The data diode vendor requires a 'heartbeat' signal from the receive side to confirm the link is up. The utility's security team is concerned that this heartbeat could be used as a covert channel. What is the best way to address this concern?

   • AReject the vendor's requirement and use a different data diode that does not require a return heartbeat
   • BAllow the heartbeat but monitor it for anomalies
   • CUse the heartbeat as a secondary channel for sending configuration updates
   • DAllow the heartbeat but ensure it is encrypted and authenticated
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security consultant is advising a power utility on whether to deploy a data diode or a unidirectional gateway that uses software to block return traffic. The utility's main concern is protecting against a sophisticated adversary who might attempt to exploit the device. What is the consultant's best recommendation?

   • ADeploy a unidirectional gateway because it is easier to update and patch
   • BDeploy a data diode because it provides a physical guarantee that cannot be bypassed by software exploits
   • CDeploy a firewall with strict rules instead of either device
   • DDeploy both devices in series to provide defense in depth
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does a data diode help protect against data exfiltration?

   • ABy monitoring outbound traffic for sensitive data patterns
   • BBy encrypting all data so that even if it is stolen, it cannot be read
   • CBy allowing data to flow only in the intended direction, making it impossible for an attacker to send data back out of the network
   • DBy blocking all outbound traffic except for a few approved protocols
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a significant limitation of a data diode?

   • AIt requires a public IP address to function
   • BIt cannot provide bidirectional communication, so protocols that require acknowledgments or responses will not work
   • CIt can only be used with fiber optic cabling
   • DIt can only transfer data at speeds below 1 Mbps
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A team is designing a data diode for a high-security environment. They want to ensure that even if a transmitter is compromised, it cannot receive any data. Which design feature is essential?

   • AThe transmitter is placed in a Faraday cage to block electromagnetic signals.
   • BThe transmitter is connected to a firewall that blocks all incoming packets.
   • CThe transmitter has no receive capability, only a transmit optical or electrical interface.
   • DThe transmitter uses a strong encryption algorithm to protect data.
   Reveal Solution Discussion Select an answer first